Access Control Policy Tool

Award Information
Agency: Department of Commerce
Branch: National Institute of Standards and Technology
Contract: 70NANB16H190
Agency Tracking Number: 013.03.02 (2016)
Amount: $300,000.00
Phase: Phase II
Program: SBIR
Awards Year: 2016
Solicitation Year: 2016
Solicitation Topic Code: 9.03.02
Solicitation Number: N/A
Small Business Information
320 Whittington Pkwy., Louisville, KY, 40222-4917
DUNS: 877380530
HUBZone Owned: N
Woman Owned: N
Socially and Economically Disadvantaged: Y
Principal Investigator
 Bin Xie
 (502) 371-0907
 bin.xie@InfoBeyondtech.com
Business Contact
 Bin Xie
Phone: (502) 371-0907
Email: Bin.Xie@InfoBeyondtech.com
Research Institution
N/A
Abstract
Access Control (AC) determines the permission of a request in attempt to access certain resources in a software system. It has been greatly used for financial, security, privacy, safety, defense, and many other applications. However, there is no commercial‐ready tool to conveniently and thoroughly compose, test, and verify the policies against potential vulnerabilities. In this project, InfoBeyond advocates the development of a user‐friendly, efficient, reliable, and generic Access Control Policy modeling, verification, and Testing (ACPT) Tool. Our ACPT enhances the NIST’s ACPT design and add several advanced features for achieving high security confidence AC levels such that it can be commercialized. It provides user‐friendly GUI templates for user to compose attributes, enable property tests by a model checker, perform combinatorial tests, and generate XACMAL policies. It specifically improves the NIST’s ACPT design to provide a robust, unified, and generic model checker in an ABAC (Attributed‐based Access Control) framework. Our ACPT will be developed as a standalone software package and web‐based services. The standalone software package can be run in a private server for government and enterprise customers. The web service design facilitates the ACPT webification and evolution in a distributed computing environment for a large number of customers.

* Information listed above is at the time of submission. *

Agency Micro-sites

SBA logo
Department of Agriculture logo
Department of Commerce logo
Department of Defense logo
Department of Education logo
Department of Energy logo
Department of Health and Human Services logo
Department of Homeland Security logo
Department of Transportation logo
Environmental Protection Agency logo
National Aeronautics and Space Administration logo
National Science Foundation logo
US Flag An Official Website of the United States Government